Revert "Merge pull request 'Complete Housekeeping migration and /ase cutover' (#52) from codex/housekeeping-complete into main"

This reverts commit 488b6e57c4, reversing
changes made to b506b4499a.

src/app/api/media/[...path]/route.ts

@@ -4,16 +4,7 @@ import path from "node:path";
 import { NextResponse } from "next/server";
 import { MEDIA_ROOT, resolveMediaPath } from "@/lib/media-storage";
 
-const ALLOWED_EXT = [
-	".png",
-	".jpg",
-	".jpeg",
-	".gif",
-	".webp",
-	".svg",
-	".bmp",
-	".ico",
-];
+const ALLOWED_EXT = [".png", ".jpg", ".jpeg", ".gif", ".webp", ".svg", ".bmp"];
 
 export async function GET(
 	_request: Request,
@@ -50,20 +41,12 @@ export async function GET(
 		".webp": "image/webp",
 		".svg": "image/svg+xml",
 		".bmp": "image/bmp",
-		".ico": "image/x-icon",
 	};
 
 	return new NextResponse(bytes, {
 		headers: {
 			// eslint-disable-next-line security/detect-object-injection -- ext validated against ALLOWED_EXT
 			"Content-Type": mime[ext] ?? "application/octet-stream",
-			"X-Content-Type-Options": "nosniff",
-			...(ext === ".svg"
-				? {
-						"Content-Security-Policy":
-							"sandbox; default-src 'none'; style-src 'unsafe-inline'",
-					}
-				: {}),
 			"Cache-Control": "public, max-age=3600, must-revalidate",
 		},
 	});